JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.173.20.86

158.173.20.86 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 3%: ?

ISP	VPN Consumer Amsterdam, The Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.173.20.86

Whois 158.173.20.86

IP Abuse Reports for 158.173.20.86:

This IP address has been reported a total of 53 times from 37 distinct sources. 158.173.20.86 was first reported on October 8th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-07-03 07:06:38 (5 days ago)	Connection to port 11697 with data transfer. Data preview: BitTorrent protocol	Port Scan Hacking
🇷🇺 Agrohim	2026-02-27 00:28:46 (4 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
Anonymous	2026-02-19 04:05:30 (4 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇹🇷 rtbh.com.tr	2026-02-15 20:11:35 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-02-15 08:29:25 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/Netherlands/-)	Brute-Force
Anonymous	2026-02-15 08:28:01 (4 months ago)	...	Brute-Force
🇺🇸 bigscoots.com	2026-02-15 08:17:22 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-15 03:16:52 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:21324: 535 Incorrect authentication data ([email protected]) 2026-02-15 03:16:58 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:21324: 535 Incorrect authentication data ([email protected]) 2026-02-15 03:17:05 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:32792: 535 Incorrect authentication data ([email protected]) 2026-02-15 03:17:07 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:32792: 535 Incorrect authentication data ([email protected]) 2026-02-15 03:17:18 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:30301: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-02-15 07:52:39 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-15 02:52:13 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:50411: 535 Incorrect authentication data ([email protected]) 2026-02-15 02:52:19 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:50411: 535 Incorrect authentication data ([email protected]) 2026-02-15 02:52:26 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:6466: 535 Incorrect authentication data ([email protected]) 2026-02-15 02:52:28 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:6466: 535 Incorrect authentication data ([email protected]) 2026-02-15 02:52:37 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:61559: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇳🇴 atluxity	2026-02-15 06:47:03 (4 months ago)	2026-02-15 06:47:02,754 INFO [qtp626742236-276:smtp://host1.domain.tld:7073/service/admin/soap/] [o ... show more 2026-02-15 06:47:02,754 INFO [qtp626742236-276:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=158.173.20.86;oport=61221;oproto=smtp;soapId=298a6d06;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2026-02-15 06:47:02,755 INFO [qtp626742236-276:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=158.173.20.86;oport=61221;oproto=smtp;soapId=298a6d06;] SoapEngine - handler exception: authentication failed for [[email protected]], account not found 2026-02-15 06:47:02,860 INFO [qtp626742236-982:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=158.173.20.86;oport=61221;oproto=smtp;soapId=298a6d07;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: account not found. 2026-02-15 06:47:02,860 INFO [qtp626742236-982:smtp://host1.domain.tld:7073/service/admin/soap/] [oip=158.173.20.86;oport=61221;oproto=smtp;soapId=298a6d07;] SoapEngine - handler exception: auth ... show less	Brute-Force Web App Attack
🇦🇺 Asimar	2026-02-15 06:19:40 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-)	Brute-Force
Anonymous	2026-02-15 06:14:57 (4 months ago)	SMTP AUTH 158.173.20.86 (SMTP_LOGIN_ATTEMPT)	Brute-Force
Anonymous	2026-02-15 06:05:45 (4 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 Nerdscave Hosting	2026-02-15 05:40:53 (4 months ago)	SMTP brute-force detected by Fail2Ban in plesk-postfix jail	Email Spam Brute-Force
Anonymous	2026-02-15 05:00:27 (4 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇺🇸 bigscoots.com	2026-02-15 02:40:15 (4 months ago)	(smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs ... show more (smtpauth) Failed SMTP AUTH login from 158.173.20.86 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-14 21:11:29 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:64416: 535 Incorrect authentication data ([email protected]) 2026-02-14 21:39:56 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:32012: 535 Incorrect authentication data ([email protected]) 2026-02-14 21:40:02 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:32012: 535 Incorrect authentication data ([email protected]) 2026-02-14 21:40:08 dovecot_plain authenticator failed for H=([10.6.18.63]) [158.173.20.86]:48008: 535 Incorrect authentication data ([email protected]) 2026-02-14 21:40:14 dovecot_login authenticator failed for H=([10.6.18.63]) [158.173.20.86]:48008: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.215.239.210

🇩🇪 161.35.74.94

🇷🇴 80.94.95.242

🇧🇷 187.35.53.118

🇷🇺 178.46.128.225

🇺🇸 66.132.172.140

🇳🇱 45.148.10.151

🇸🇪 2a05:d016:268:8b01:d7b2:7ee4:377f:a062

🇰🇷 218.149.228.144

🇺🇸 216.24.210.116

🇲🇾 208.84.103.212

🇧🇷 177.135.223.123

🇨🇦 142.179.117.177

🇧🇷 45.174.162.68

🇨🇦 20.104.88.1

🇯🇵 20.48.32.28

🇧🇬 185.253.159.248

🇳🇱 176.65.148.185

🇨🇳 123.233.236.113

🇧🇪 104.155.7.115